Posts by YetAnotherJoeBlow 351 publicly visible posts • joined 5 Apr 2015
I have a couple of government contracts - one in the US and and another in Asia. I sent an email to my contact in Asia saying I understand their situation and offered them an out. " Na - you can continue - we are still setting sail." I also have several active contracts in the US and elsewhere that are business as usual. Life will still continue.
"... and that he accessed the document after his resignation from Google."
You can do that at Google? At all of my clients when they fire a person or when someone resigns, they are locked out before they ever even leave the office they quit or were fired in. By the time the interview is over, there is a list of what needs to be returned and also what the person has downloaded recently (about 1 yr.)
In fact a few of my clients have key people when hired agree to submit to a whole body scan on entrance and exit. This always includes me too although I never need to bring in anything.
All these companies streaming and locally hosting instead of going to conventions. If this process works out well for the companies, they might cut down on the many Cons they attend each year. The entire convention industry might be made redundant or shrink considerably. There are way too many conventions anyway....
I am glad that I make policy instead of following it. None of my clients use nodejs - they are smarter than letting all-comers inject code into their repositories. I wouldn't service the customer as I wouldn't want to take the blame when ransom ware strikes. My livelihood depends on that.
The below link is a nice summary to harden the Firefox browser. Also grab a search engine from Mycroft as Mozilla passes your browser info every time you use search.
Harden Firefox:
https://www.privateinternetaccess.com/blog/2018/09/firefox-hardening-guide/
search engines:
https://mycroftproject.com/dlstats.html
My browser is locked down as much as possible and run in sandbox locked down as much as possible - I still will not run scripts or binary blobs. If a site breaks, I go somewhere else. Usually, I do not give a flying f*** what the standards say. If it looks like shite and smells like shite... Want Another Shite Meal?
I am so sick and tired of software that changes my configurations without telling me - I do things in there for a reason. I can not begin to count how many times vendors make those changes - and by people who should know better. It is just part of the new era apparently, I call it arrogance. Technically, that action is quasi illegal - modifying a computer system without authorization ...
I'm probably missing something, but the last time I looked I found C code in I think in relibc and one other spot I can not remember. I also noticed that when it's time to do "the fun stuff" every thing is prefixed with unsafe. So in the end it is still unsafe correct? Like I said though, I'm probably missing something.
"It cannot be a sustainable end state for us to be creating an unfettered space that’s beyond lawful access for terrorists, hackers, and child predators to hide. But that’s the path we’re on now, if we don’t come together to solve this problem."
See what they are doing? They are trying to raise the bar from IF we implement crypto backdoors to Why not help us backdoor crypto, it will be better then.
The government doesn't really want the "key" per say, what the government really wants is to pass a law against cryptography so that if the feds can't decrypt it, the individual(s) are guilty of using crypto without a license and to be sentenced to jail up to 10 years each count, with time off if the individual(s) give the feds the key.
You can see where this is going... That law would be catastrophic; swinging the pendulum so far to the right, it may never recover.
Do not forget, If the NSA wants to read your files, they will read your files.
Of course the baddies will immediately stop using strong crypto so world+dog can read their plans - they also
wouldn't set up their own servers around the world for secured comms because doing so would be illegal.
Of course, I'll delete all of my crypto repos (my life long work) and force my clients to do the same; then I'll close my business.
It's never too late to shut the barn door even if its empty.
Remember when during the days of timesharing, payroll processing, et al? Then came the day where small business could afford a computer. No more arguing with your timeshare provider in the "cloud"! No more lost data, or telecom problems. Reports now produced on time!
Now in our infinite wisdom, we jump back 20 years in time, AND expose our data to any hacker that has about a days time to help themselves to your data. WTF were they thinking? Then the bills come, and keep coming...
My schedule is my livelihood. All I need is on my phone; if that gets lost, I go to my home server. If that goes down, I restore frome tape. At the beginning of the day I print my calendar out and take it with me for convenience and safety. If I cannot manage my own calendar, how can my clients trust me to manage their critical data?
I wonder when we will go back to onsite again?
I use Proton Mail too. So far so good but i still PGP encrypt first on my pc before I send it anyway. Proton Mail gives you a false sense of security only because the vast majority of your emails come from outside Proton Mail over unencrypted port 23. So if necessary, all one has to do is a minor change to their server to collect all your incoming and outgoing SMTP as it arrives or leaves before it gets encrypted with your private key.
So far they have been very reliable.
When I last used CICS, I had a lot of respect for its abilities in a truely love-hate relationship. So this company services the CICS calls AND all of the other APIs as well? Yes, I have a lot of questions too! Had I read this article anywhere else, I would have called BS.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
